Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/04QV-ve6N6q1z5keiSip22HWq-U.roa
File: 04QV-ve6N6q1z5keiSip22HWq-U.roa (raw, json)
Hash identifier: oA0QfyCg1GT0LK/v+pk71hC3hYPHoYN/Zjd1n/b4oLE=
Subject key identifier: D3:84:15:FA:F7:BA:37:AA:B5:CF:99:1E:89:28:A9:DB:61:D6:AB:E5
Certificate issuer: /CN=4e2b6a6943d3338d0075036d969ec01c3dcefca9
Certificate serial: 0194228D60D1D718FB87561D495825FF35B6
Authority key identifier: 4E:2B:6A:69:43:D3:33:8D:00:75:03:6D:96:9E:C0:1C:3D:CE:FC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TitqaUPTM40AdQNtlp7AHD3O_Kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/04QV-ve6N6q1z5keiSip22HWq-U.roa
Signing time: Wed 01 Jan 2025 15:47:58 +0000
ROA not before: Wed 01 Jan 2025 15:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202813
IP address blocks: 185.178.136.0/22 maxlen: 24
185.178.136.0/23 maxlen: 23
185.178.136.0/24 maxlen: 24
185.178.137.0/24 maxlen: 24
185.178.138.0/23 maxlen: 23
185.178.138.0/24 maxlen: 24
185.178.139.0/24 maxlen: 24
2a0b:fa80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/TitqaUPTM40AdQNtlp7AHD3O_Kk.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/TitqaUPTM40AdQNtlp7AHD3O_Kk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TitqaUPTM40AdQNtlp7AHD3O_Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:60:d1:d7:18:fb:87:56:1d:49:58:25:ff:35:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e2b6a6943d3338d0075036d969ec01c3dcefca9
Validity
Not Before: Jan 1 15:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d38415faf7ba37aab5cf991e8928a9db61d6abe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9e:7b:9d:d5:58:45:f1:a7:54:74:75:4e:d1:
07:99:1d:02:ed:2b:94:55:ee:4d:f7:52:c6:e6:7a:
c3:7b:ec:5f:49:88:50:57:10:e2:ae:b0:90:84:77:
e9:ef:ca:54:0d:6a:9b:b0:e0:9e:e2:6e:62:32:78:
e6:61:c0:7f:d2:97:e2:d1:51:7b:0a:c6:f2:d4:da:
b2:1f:d2:ce:2a:fd:26:22:4c:be:2b:78:43:43:a3:
22:10:12:e4:b2:a3:a9:0c:2b:cd:b5:97:57:6f:b2:
a2:e8:e7:f5:cf:af:10:a5:65:26:ec:3d:ce:8c:1f:
c6:7a:ab:79:50:41:ab:5e:15:cf:ff:b1:df:f4:b0:
af:2a:e9:6f:ea:df:e9:16:6d:33:e2:39:84:a8:14:
27:15:5f:8c:bc:ec:4c:09:01:68:4b:c7:9d:86:e6:
eb:00:82:e6:87:12:62:b6:b7:4a:6f:a4:50:b3:4c:
5f:bc:3f:93:ce:c2:ca:b5:ab:10:44:4c:79:9e:79:
14:79:70:31:31:d8:d7:3b:9a:89:98:b0:01:aa:0e:
42:51:6e:75:b5:2b:9f:5b:b1:11:89:7e:e7:b7:73:
8a:7f:d4:ab:d1:12:cc:21:91:0a:bd:88:80:3f:db:
3f:3e:48:65:7e:1d:f4:fe:da:76:0a:a3:4a:d1:c9:
ac:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:84:15:FA:F7:BA:37:AA:B5:CF:99:1E:89:28:A9:DB:61:D6:AB:E5
X509v3 Authority Key Identifier:
keyid:4E:2B:6A:69:43:D3:33:8D:00:75:03:6D:96:9E:C0:1C:3D:CE:FC:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TitqaUPTM40AdQNtlp7AHD3O_Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/04QV-ve6N6q1z5keiSip22HWq-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/TitqaUPTM40AdQNtlp7AHD3O_Kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.178.136.0/22
IPv6:
2a0b:fa80::/29
Signature Algorithm: sha256WithRSAEncryption
68:ce:46:d6:5b:b8:9e:36:f3:ce:16:c0:a7:8d:fb:43:2d:31:
ac:09:ab:71:8d:c2:0a:39:d4:64:75:31:d6:41:9c:55:6e:02:
30:77:63:40:47:0d:c7:55:ad:fd:bf:ac:da:16:df:75:8f:1b:
1e:b1:60:6e:0f:f8:db:22:13:a6:ef:b8:f6:bb:80:bf:17:ac:
94:ba:6c:2d:1d:0f:7c:9a:03:bf:38:c0:d6:3e:9d:ea:70:0d:
d6:86:1c:b6:ce:e0:e7:b5:dc:bd:00:78:01:77:8f:5e:cd:75:
8a:bc:db:45:31:94:38:f2:ee:d7:91:a2:22:e3:45:84:f6:ee:
17:56:d3:d6:64:46:fd:4a:1a:be:8a:37:78:81:08:eb:3a:43:
36:54:3b:98:53:47:ec:ac:67:c7:e7:ba:dc:83:81:78:3d:d1:
de:5a:41:d7:d0:c7:6e:d4:d5:b7:cb:f2:50:92:dc:e7:74:10:
ea:2e:81:b1:f4:e6:29:4d:5d:86:bd:39:12:bc:e2:5b:b2:8c:
3c:32:35:c5:1f:5a:12:0d:ff:b4:81:d4:34:0a:40:6a:cf:69:
60:0f:b7:b0:b0:44:2e:6a:d3:d1:5d:f8:62:6b:44:62:a2:5e:
6a:cf:35:93:46:b9:f5:70:0f:dd:1b:13:d3:28:6a:2d:80:2c:
1d:6e:3e:7b
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQijWDR1xj7h1YdSVgl/zW2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlMmI2YTY5NDNkMzMzOGQwMDc1MDM2ZDk2OWVjMDFjM2Rj
ZWZjYTkwHhcNMjUwMTAxMTU0NzU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMzg0MTVmYWY3YmEzN2FhYjVjZjk5MWU4OTI4YTlkYjYxZDZhYmU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq557ndVYRfGnVHR1TtEHmR0C7SuU
Ve5N91LG5nrDe+xfSYhQVxDirrCQhHfp78pUDWqbsOCe4m5iMnjmYcB/0pfi0VF7
Csby1NqyH9LOKv0mIky+K3hDQ6MiEBLksqOpDCvNtZdXb7Ki6Of1z68QpWUm7D3O
jB/Geqt5UEGrXhXP/7Hf9LCvKulv6t/pFm0z4jmEqBQnFV+MvOxMCQFoS8edhubr
AILmhxJitrdKb6RQs0xfvD+TzsLKtasQREx5nnkUeXAxMdjXO5qJmLABqg5CUW51
tSufW7ERiX7nt3OKf9Sr0RLMIZEKvYiAP9s/Pkhlfh30/tp2CqNK0cmsXQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFNOEFfr3ujeqtc+ZHokoqdth1qvlMB8GA1UdIwQY
MBaAFE4ramlD0zONAHUDbZaewBw9zvypMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGl0cWFVUFRNNDBBZFFOdGxwN0FIRDNPX0trLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy84ODk2MDgtMGY0MC00YTY0LWI1MjYt
MWEyNmI5ZDhmZWRlLzEvMDRRVi12ZTZONnExejVrZWlTaXAyMkhXcS1VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy84ODk2MDgtMGY0MC00YTY0LWI1MjYtMWEyNmI5ZDhmZWRl
LzEvVGl0cWFVUFRNNDBBZFFOdGxwN0FIRDNPX0trLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCubKIMA0E
AgACMAcDBQMqC/qAMA0GCSqGSIb3DQEBCwUAA4IBAQBozkbWW7ieNvPOFsCnjftD
LTGsCatxjcIKOdRkdTHWQZxVbgIwd2NARw3HVa39v6zaFt91jxsesWBuD/jbIhOm
77j2u4C/F6yUumwtHQ98mgO/OMDWPp3qcA3Whhy2zuDntdy9AHgBd49ezXWKvNtF
MZQ48u7XkaIi40WE9u4XVtPWZEb9Shq+ijd4gQjrOkM2VDuYU0fsrGfH57rcg4F4
PdHeWkHX0Mdu1NW3y/JQktzndBDqLoGx9OYpTV2GvTkSvOJbsow8MjXFH1oSDf+0
gdQ0CkBqz2lgD7ewsEQuatPRXfhia0Riol5qzzWTRrn1cA/dGxPTKGotgCwdbj57
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:17:37 2025 by rpki-client